refactor haproxy

roles/haproxy/files/update_haproxy_certs.sh

@@ -12,14 +12,17 @@ do
           --non-interactive                  \
           --agree-tos                        \
           --email micha@0rpheus.net          \
-          --preferred-challenges=http        \
           --rsa-key-size 4096                \
-          --http-01-port=8888
+          --webroot                          \
+          --webroot-path /var/www/html
     fi
-done < /etc/haproxy/domains.txt
+done < /etc/haproxy/all-domains.txt
 
 # renew all certificates
-certbot renew --http-01-port=8888 --preferred-challenges=http --rsa-key-size 4096
+certbot renew                     \
+    --rsa-key-size 4096           \
+    --webroot                     \
+    --webroot-path /var/www/html
 
 # copy certificates
 find /etc/letsencrypt/live/ -mindepth 1 -maxdepth 1 -type d | while read -r domain_path
@@ -35,3 +38,7 @@ do
 done
 
 systemctl reload haproxy
+
+# prosody cert
+prosodyctl --root cert import /etc/letsencrypt/live
+systemctl restart prosody.service